CVE-2023-49803
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-49803 is a vulnerability in the @koa/cors npm package, which provides Cross-Origin Resource Sharing (CORS) for the koa web framework in Node.js. Versions prior to 5.0.0 of the middleware operate in a way that disables the Same Origin Policy (SOP) if an allowed origin is not provided, posing a serious security threat to users. Organizations using this middleware should update to version 5.0.0 or higher to remediate the vulnerability. The affected products include various versions of t0V6RU, t0V6RV, t0V6RW, t0V6RX, and others. The vulnerability has a base severity rating of HIGH and an exploitability score of 3.9 according to [email protected].
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions